pysilon

Resubmissions

20/06/2024, 00:44

240620-a3r1ssterl10

14/06/2024, 01:30

14/06/2024, 01:15

14/06/2024, 01:04

14/06/2024, 01:04

13/06/2024, 23:33

Sharing

Copy URL Twitter E-mail

General

Target
casino_reaper.exe
Size 29.6MB
Sample240614-bmkgfstalk
SHA256 8bd7e81c578953be87711a702b845a9eb5801f22cc6b26433d9282d34542f0f8
MD5 a3eab93dc4ff500a0fb9b9c7df2be31c
SHA1 506e212927b7203c46c5672e9950d1dbc571947b
SHA512 3ab3f7ef19bfb17c319167403081b7feb99d26330f9e83f952b188ba5b767a0d0841b5e4b813d1cc5a58c274f44f7554c3465eefd64f5765a1ade40636a988d3
SSDEEP 786432:r9Z9bYQ3KMwdbTOHzcY87HC59KMhgXYD1L99ZXrJlQ:RvbYQ3jwdf4E7WjCW99P
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  discord_token_grabber.pyc
- Size 17KB
- SHA256 8ae6baddc552f9a47c488760a3d3b04f217f7c999dbffc1a548bb09532e6bf77
- MD5 e523026b612006e580e96bd9e2a8882c
- SHA1 03b9938701f7eff11a0c3632ed805e8188598c88
- SHA512 a0f15f5edecbab4894aa3b85092fc2bde34b76f6048b198ce387d59a56d6c74969201cc43d19cd27a9ff0a6ab72268884a90ef206f0be34a5707a7f6ea24a853
- SSDEEP 384:cGllyAavwS9F0RW807PPQviowoYbCj+Mo8WWIc02a8:cIlytvX9iRW8inQ6owoYOyM0d2a8
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral1
- Target
  get_cookies.pyc
- Size 10KB
- SHA256 85a7c34afad2c270ca690a5b4c30cc8bf16967e623fc77f4de4497901030a93b
- MD5 b38f506528b3d6d5dbd851426c347b95
- SHA1 e91bf4ef42128267934e21be0176e552480f5977
- SHA512 ab110dc92eba564fd0ec6c6a75e779f588518dc1aa461f072ab02b96bc11fbe25e09faa6a556dc6a127c3e8826382697b72037a0cefbdaf32fd70a723e746295
- SSDEEP 192:TzOCIeinQfUF9LdwOEVOFc1mNe47+o+zEzzzzz1zz+HoowAE:TzOUiQccEe4KoOIAE
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral2
- Target
  misc.pyc
- Size 5KB
- SHA256 b522284f1a7e518c269c0414160407ec7834a4397f85ef389433b49367b5df9c
- MD5 31aa260c6cdeaa9d942cd0dcfcadd16a
- SHA1 a6818f3acf5c2ab9d65b41a81cb92b36b85cc932
- SHA512 0dd277ef948315a3554bd8c5110e27afa9b2eac88defc1211771c050cdd27b3668484dec35ec5c5010bff00b62c2cebd9e7286c0b114ad28437719b42bd0fc2c
- SSDEEP 96:DSajAihmJG4n3B4SmSSSSlSSSShDwegPbbVxlj0nIAEDS5ejmw01k9Bddpq:eYAfn3ySmSSSSlSSSSeeOPVxx0nIAZeQ
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral3
- Target
  passwords_grabber.pyc
- Size 8KB
- SHA256 1fd284f1e27263bd2a16050c6989933a382c7d196f4c9f247187cc3b3f6ba3ac
- MD5 704dced7f7530b19a34a5f7a71c26b10
- SHA1 608d9647488cfa2b5f84a891028168a973bfcfa9
- SHA512 e4a6710abef2c45d631745c91d8135873be06e5b240a61362e341d05ecc1dedf885487a554b648c328a3c5cc17fcf74e6d066b2e3f51379358ba28c2a0f2f39f
- SSDEEP 192:+CE34EAL/GFf/PomdPO23NsDmqFUhkxNivLI9dRvL:Y4EAL/AfRBO8NsxuOxNn
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral4
- Target
  source_prepared.pyc
- Size 130KB
- SHA256 df9f33d96ef3d48998a6a8999013bdebae5a2a112aea6978f21dd203d65b3719
- MD5 6fe936463b4ecdad5967344090b2ecbc
- SHA1 ee7a0f603c5d53fc0c92444310e615004cd803fb
- SHA512 3594f9f773960200135cc92546fc42b1e70505ba0a62e2da5375e1170249aa3271ab4d284117c6458c934e656533fc2b848b411f8514de2bb034c3e018785b5a
- SSDEEP 1536:B5v+PLaA1tj51ThM2QohhiPECAteSbdzIdcs9hDICkrfF:BAPLaAN1ThMFoePEteFcuICkrd
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

pysilon rat stealer
- Detect Pysilon
- PySilon
  An open-source RAT written in Python.
  stealer rat pysilon
behavioral5

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Detect Pysilon

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5